This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8bc797c5-d3d1-33c9-8765-b695f0fe2461.roa
File:                     8bc797c5-d3d1-33c9-8765-b695f0fe2461.roa (raw, json)
Hash identifier:          LKVR2DxMo041Ku/jCPwYuRgpvU4DmhhZJIZDbyWbp+M=
Subject key identifier:   04:FE:98:72:74:85:EB:8D:5A:13:F6:A3:B9:B7:48:2D:1F:95:7D:64
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328584C285637794F00992F622E4E00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8bc797c5-d3d1-33c9-8765-b695f0fe2461.roa
Signing time:             Fri 12 Dec 2025 02:00:30 +0000
ROA not before:           Fri 12 Dec 2025 02:00:30 +0000
ROA not after:            Thu 12 Mar 2026 01:00:30 +0000
asID:                     203724
IP address blocks:        161.69.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:28:56:37:79:4f:00:99:2f:62:2e:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Dec 12 02:00:30 2025 GMT
            Not After : Mar 12 01:00:30 2026 GMT
        Subject: CN=9f5bfd10-7ce0-4c5a-88ff-c092957b9b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1c:58:73:15:30:18:89:38:69:98:c4:2d:18:
                    0d:64:ef:3d:ee:b4:1c:44:6f:e3:60:97:91:75:84:
                    bf:0a:38:b7:b1:a2:1c:20:94:ab:81:46:bb:4e:f1:
                    0f:19:ad:05:90:03:81:cf:97:74:f7:a4:5c:ac:6f:
                    65:41:3b:da:c0:4f:65:ae:50:b9:c7:12:8b:42:5c:
                    73:2b:10:fa:59:fc:9b:b7:c0:41:cc:c5:59:97:ba:
                    c1:a4:fc:78:e1:89:2d:ba:1f:41:14:09:45:40:53:
                    74:be:d4:ce:8b:9e:0d:65:2c:46:c5:ca:69:f2:e6:
                    5a:60:33:e0:bd:b4:25:b9:19:24:ad:bb:dd:ed:7c:
                    f7:99:ea:08:67:44:cb:9a:9f:b3:6f:f8:10:b2:b3:
                    c1:0b:6f:5d:5e:11:43:7b:69:60:4c:01:3a:49:68:
                    8e:40:1d:c4:b5:64:4a:18:34:6b:1b:c3:07:3f:a8:
                    fc:9d:73:53:8e:38:36:89:9a:5d:df:2f:98:70:45:
                    44:38:47:e8:73:be:7a:d9:93:cc:8f:e8:75:49:05:
                    24:2f:7d:d6:d7:c9:94:ba:7c:91:a2:f2:0d:02:3d:
                    1e:d5:c3:df:a7:57:07:8a:b6:76:6a:a4:95:17:06:
                    89:c9:f9:a9:45:84:76:f2:63:83:26:06:69:27:33:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:98:72:74:85:EB:8D:5A:13:F6:A3:B9:B7:48:2D:1F:95:7D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8bc797c5-d3d1-33c9-8765-b695f0fe2461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:f2:a2:f8:f4:55:ee:d5:f6:02:15:4b:4a:3e:71:ac:8b:
         13:d3:49:46:0d:5c:04:6b:ec:a6:7e:8b:95:41:2e:01:9a:4a:
         76:1f:26:60:65:bc:43:77:f2:8b:8e:b7:54:8e:45:57:c6:7b:
         d4:e5:56:9e:12:c2:f2:dc:7e:70:85:ea:56:37:7d:ce:90:66:
         ac:67:78:9d:46:98:8f:fa:7b:7e:cd:62:9e:cd:a7:6b:59:d7:
         54:a8:b1:c7:9b:01:0d:b7:1b:95:d9:3e:b7:43:74:b2:f6:3d:
         2c:fa:83:69:65:2e:b0:9d:b2:ef:ea:75:cc:a7:88:95:35:5e:
         35:c6:24:63:39:d4:c6:2c:5c:5d:27:6b:ad:5d:7e:d6:9b:8d:
         59:60:8c:fa:54:03:c5:ff:f4:56:de:80:ca:35:05:ab:44:a8:
         8f:6b:9f:37:4e:ca:a0:83:f1:98:c5:61:18:03:de:71:c3:79:
         2e:b9:33:2e:43:cf:b0:5f:c3:04:ba:b7:a9:3d:e4:0d:61:dc:
         5d:2f:1b:d9:a3:e6:cd:22:27:1c:33:4a:8c:d5:d3:f4:f8:89:
         24:d7:38:b6:6f:a6:ab:7f:5f:67:d0:f4:81:82:27:40:f1:b5:
         df:93:63:fa:bc:03:cc:67:31:df:57:30:34:39:00:e2:9d:75:
         10:7a:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:34:21 2025 by rpki-client